Search results | European Data Protection Board

Opinion 16/2020 on the draft decision of the competent supervisory authority of the Czech Republic regarding the approval of the requirements for accreditation of a certification body pursuant to Article 43.3 (GDPR)
25 May 2020
Opinion of the Board (Art. 64)
… of a certification body pursuant to Article 43.3 (GDPR) 25 May 2020 Opinion of the Board (Art. 64) Czech … of a certification body pursuant to Article 43.3 (GDPR) Adopted on 25 May 2020 2 Adopted Table of contents 1 … 4 2.2 Main points of focus for the assessment (art. 43.2 GDPR and Annex 1 to the EDPB Guidelines) that the …
Opinion 31/2020 on the draft decision of the competent supervisory authority of Poland regarding the approval of the requirements for accreditation of a code of conduct monitoring body pursuant to article 41 GDPR
7 December 2020
Opinion of the Board (Art. 64)
… of a code of conduct monitoring body pursuant to article 41 GDPR 7 December 2020 Opinion of the Board (Art. 64) Poland … of a code of conduct monitoring body pursuant to article 41 GDPR Adopted on 07 December 2020 2 Adopted Table of contents … such data, and repealing Directive 95/46/EC (hereinafter “GDPR”), Having regard to the EEA Agreement and in particular …
Germany SAs' list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
16 October 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Germany 16 October 2018 Data … of the General Data Protection Regulation (EU) 2016/679 (GDPR) 337.3KB Download Opinion / Binding decision References … of a data protection impact assessment (Article 35.4 GDPR) …
Bulgaria SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
10 October 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Bulgaria 10 October 2018 Data … of the General Data Protection Regulation (EU) 2016/679 (GDPR) 251.9KB Download Opinion / Binding decision References … of a data protection impact assessment (Article 35.4 GDPR) …
Opinion 01/2019 on the draft list of the competent supervisory authority of the Principality of Liechtenstein regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)
23 January 2019
Opinion of the Board (Art. 64)
… of a data protection impact assessment (Article 35.4 GDPR) 23 January 2019 Opinion of the Board (Art. 64) EDPB … of a data protection impact assessment (Article 35.4 GDPR) Adopted on 23 January 2019 Adopted 2 Table of contents … BE PROVIDED TO THE DATA SUBJECT ACCORDING TO ARTICLE 14.5 GDPR ..... 7 DENIAL OF SERVICE BASED (NOT SOLELY) ON …
Internal EDPB Document 2/2020 on how to deal with complaints relating to data protection infringements started before the entry into application of GDPR that continue after 25 May 2018
30 June 2020
Internal documents
… infringements started before the entry into application of GDPR that continue after 25 May 2018 30 June 2020 Internal … infringements started before the entry into application of GDPR that continue after 25 May 2018 …
Recommendations 1/2022 on the Application for Approval and on the elements and principles to be found in Controller Binding Corporate Rules (Art. 47 GDPR)
17 November 2022
Recommendations
… to be found in Controller Binding Corporate Rules (Art. 47 GDPR) Recommendations 1/2022 on the Application for Approval … to be found in Controller Binding Corporate Rules (Art. 47 GDPR) Start Date: 17 November 2022 End Date: 10 January 2023 … to be found in Controller Binding Corporate Rules (Art. 47 GDPR) …
Ireland SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
15 November 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Ireland 15 November 2018 Data … of a data protection impact assessment (Article 35.4 GDPR) … Article 35 of the General Data Protection Regulation (“GDPR”) prescribes that a Data Protection Impact Assessment …
Romania SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
18 October 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Romania 18 October 2018 Data … of a data protection impact assessment (Article 35.4 GDPR) … Data Protection Regulation, hereinafter referred to as the GDPR) which provides that, where a type of processing in …
Greece SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
16 October 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Greece 16 October 2018 Data … of a data protection impact assessment (Article 35.4 GDPR) … of the General Data Protection Regulation (EU) 679/2016 (GDPR). Before issuing such a list, the Authority, in …
Italian SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
11 October 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Italy 11 October 2018 Data Protection … of a data protection impact assessment (Article 35.4 GDPR) … 95/46/EC (General Data Protection Regulation, hereinafter ‘GDPR’); Having regard to, in particular, Article 35(1) of …
Czech SAs list of the kind of processing operations exempt from the requirement for a Data Protection Impact Assessment under Art 35(5) of the General Data Protection Regulation (EU) 2016/679 GDPR
8 January 2020
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 GDPR Decision Type SA Czech Republic 8 January 2020 Data Protection Impact Assessment (DPIA) cz_art35-5_gdpr_list_final.pdf 427.3KB Download Opinion / Binding … of a data protection impact assessment (Article 35(5) GDPR) …
Belgium SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
16 January 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Belgium 16 January 2019 Data … of a data protection impact assessment (Article 35.4 GDPR) … for which a DPIA shall be required (Section 35 (4) of the GDPR) Each supervisory authority has the obligation to …
Luxembourg SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
6 March 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Luxembourg 6 March 2019 Data … of a data protection impact assessment (Article 35.4 GDPR) … of such data, repealing Directive 95/46/EC (hereafter “GDPR”), and in particular Article 35 thereof; Having regard …
Liechtenstein SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
27 February 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Liechtenstein 27 February 2019 Data … of a data protection impact assessment (Article 35.4 GDPR) … 1 List of processing operations according to Art. 35 (4) GDPR, for which the Data Protection Authority (DSS) as the …
France SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
6 November 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA France 6 November 2018 Data … of a data protection impact assessment (Article 35.4 GDPR) … impact assessment (DPIA) is required (article 35.4 GDPR) The Commission nationale de l'informatique et des …
Norway SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
16 March 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Norway 16 March 2019 Data Protection … of a data protection impact assessment (Article 35.4 GDPR) … Protection Authority hereby decides, in accordance with GDPR Article 35(4), cfr. Article 57(1)(k), that the …
Finland SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
15 October 2018
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Finland 15 October 2018 Data … of a data protection impact assessment (Article 35.4 GDPR) … data protection impact assessment (DPIA) Article 35 (1) GDPR requires a DPIA when the processing activity is likely …
Hungarian SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
23 January 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Hungary 23 January 2019 Data … of a data protection impact assessment (Article 35.4 GDPR) … European Parliament and of the Council (hereinafter ‘the GDPR’), the National Authority for Data Protection and …
Estonia SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
19 March 2019
Decision by the SA
… of the General Data Protection Regulation (EU) 2016/679 (GDPR) Decision Type SA Estonia 19 March 2019 Data Protection … of a data protection impact assessment (Article 35.4 GDPR) … assessment In case of cross-border data processing (see GDPR art. 35 (6)), the aspect of large scale processing …